Pursuant to the Regulation no. 679 of April 27, 2016 of the European Parliament and of the Council of the European Union on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as GDPR), the company Kiwee Comunicatii SRL, having its headquarters at Bucharest, registered with the Trade Registry under the number J2003000703403, having sole identification code RO 15143378 ("Kiwee") intends to administer, collect, record, store, use and/or disclose to third parties (together referred to as "Processing") the personal data transmitted by you, in accordance with the terms and conditions described hereinafter and under compliance with the current GDPR Law.

By this Agreement for the processing of personal data, your consent is required pursuant to the GDPR Law, so that your personal data may be Processed according to the provisions below:

Kiwee intends to process your personal data, which are set out below, for the following purposes that are related to the process of staff recruiting for the occupation of present or future jobs within Kiwee or within the companies of the group American Greetings Corporation, of which Kiwee is part:

• Creation of a general record /online data base of the persons who transmitted their Personal Data, either directly, by the application available on the website www.americangreetings.ro or by the mediation of a third party you have authorized to supply us your Personal Data (social media networks, such as LinkedIn etc.); such data shall be processed so that the recruitment processes initiated by Kiwee can be carried out, conducted and managed.
• In this context, your personal data may be transferred to the above-mentioned entities within the European Economic Area or outside the European Economic Area, such as the United States of America, in accordance with the GDPR.

In order that recruitment processes can be properly managed, you may be contacted by e-mail, phone calls or texting.

Personal Data that are to be processed are the following:

• Personal Data to be used for the identification of applicants, including their name and first name, e-mail address and phone number;
• Personal Data related to the education / professional training of applicants, including information regarding the school they graduated from, the qualification courses they attended, their studies and the level thereof;
• Personal Data related to the professional activity of the applicants, including information regarding their profession, work experience, area of specialization, previous jobs, current job, position and function, data from references related to previous positions (where applicable).

Given the nature of the recruitment process - involving the need to process candidates' personal data for the purpose of personnel selection/ internships, a refusal to provide data may lead to the impossibility to carry out this process.

Any operation, carried out by manual and/or organized automated means, which amounts to processing (collection, storage, recording, structuring, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, destruction) of your personal data will be carried out solely in accordance with the provisions of the GDPR and national laws on the protection of personal data and in accordance with other relevant provisions in the field, for the following purposes:

• - Recruiting staff to fill vacancies or for internships within the Society (involving activities such as selecting and conducting interviews and managing the recruitment process, centralizing data for future processes as appropriate for as long as they are relevant, and centralizing data at group level in specific cases for recruitment purposes).

The legal grounds for processing for the above purposes consist of the following:

• - art. 6 para. 1 lit. f of the GDPR - the processing is necessary for the purposes of the legitimate interests of the Company (to ensure the selection and hiring of personnel necessary for the performance of the Company's activity or for the performance of internships within the Company);
• - art. 6 para. 1 lit. b of GDPR - the processing is necessary for the performance of a contract to which the data subject (the candidate who has received, respectively accepted an offer of employment) is a party or to take steps at the request of the data subject prior to the conclusion of a contract (i.e. employment contract).

It is very important that the information you supply to us in the blank fields, as well as in the files, links or documents you upload should not contain confidential information or sensitive personal data, such as: your racial or ethnic origin, your ideology or political beliefs, your religious or philosophical beliefs, your affiliation to any political parties or trade unions, your physical or mental health, any biometrical or genetic configuration data, your sexual orientation, your criminal record, your personal identification number etc. Should you provide us confidential information, please assume your own responsibility regarding all and any possible risks related to your confidentiality.

In carrying out the above activities, the Company may disclose your personal data to the following categories of recipients: to its processors (on the basis of appropriate confidentiality and data protection undertakings) such as relevant service providers, where applicable; to competent authorities in cases provided by law (such as courts); to contractual partners (such as companies assisting in the recruitment process, specialized in this field), as well as to group companies for the purpose of centralization of data at group level, in accordance with applicable rules and policies, for certain positions within the Company

Personal Data submitted through the online application form will be transmitted to the Company’s designated recruitment email inbox and processed for the purposes of managing and responding to your application. This may include reviewing CVs and related candidate information by authorized HR personnel. Such Personal Data may be stored and processed within Microsoft Outlook and Microsoft OneDrive, which are used by the Company as part of its secure IT environment.

Microsoft may process and store Personal Data within the European Union and, where necessary, in other jurisdictions, including the United States. Any transfer of Personal Data outside the European Economic Area (EEA) will occur in accordance with applicable data protection laws and the safeguards required under Chapter 12 of the Company’s Personal Data Management Procedure, including reliance on adequacy decisions issued by the European Commission or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, as implemented by Microsoft.

Personal Data can be accessed by the staff of Kiwee or of the companies within the Group American Greetings Corporation., according to their attributions, which are specific to their position and in compliance with internal regulations, specifically only for the purpose for which they have been communicated (managers, HR staff, persons authorized to have access to Personal Data for the staff recruitment process).

The aforementioned personal data can be communicated to other companies with which Kiwee or the companies part of the Group have partnerships (personnel recruitment service providers, call center providers, etc.) in order to fulfill the purpose it is collected for, but only on the condition that said companies ensure maintaining confidentiality of the data and adopt measures for its security.

The Company retains candidates' personal data for a determined period of time, according to the law, with the scope of recruitment and afterwords for future job opportunities, ensuring compliance with data protection provisions terms and conditions, and to protect the legitimate interests of the Company in strictly justified cases.

Pursuant to the provisions of the GDPR Law, you are kindly informed that you are entitled to the following rights related to the Processing or Personal Data by Kiwee:

• the right of access to Personal Data - any person has the right to obtain, upon request and free of charge for one request per year, the confirmation of the fact that data concerning them are processed by the operator or not;
• the right of intervention upon data - any person is entitled to require, by a dated and signed written application, that data should be rectified, updated, blocked or deleted;
• the right to object - the person is entitled to object at any time, by a dated and signed written application, to the possibility that the data related to them might be processed or revealed to third parties;
• the right to avoid individual decisions adopted exclusively based on automatic processing of Personal Data;
• the right to open court proceedings or to file a complaint with the relevant supervisory authority so as to appeal against the decisions of Kiwee;
• the right to file a suit and claim damages for the violation of rights pursuant to the Law.

The rights stipulated above may be exerted by sending a dated and signed written application to Kiwee, at the address B-dul Iuliu Maniu nr. 7, corp A, etaj 3, sector 6, Bucuresti, or by contacting the person in charge of personal data protection, Mrs. Rosca Daniela, email: daniela.rosca@amgreetings.com, phone number (+40) 0755 130 929.

You may consent or refuse to consent to the Processing of Personal Data.

Within the limitations of the law, Kiwee ensures the privacy of your Personal Data and that your right to the maintain privacy on your private life is complied with.

If you intend to consent to the processing of Personal Data, you need to accept this Agreement for the Processing and Transfer Abroad of Personal Data, by checking the corresponding icon.